521 matches found
CVE-2017-5647
A bug in the handling of the pipelined requests in Apache Tomcat 9.0.0.M1 to 9.0.0.M18, 8.5.0 to 8.5.12, 8.0.0.RC1 to 8.0.42, 7.0.0 to 7.0.76, and 6.0.0 to 6.0.52, when send file was used, results in the pipelined request being lost when send file processing of the previous request completed. Thi...
Huawei Mate 9 Phone Finder bypasses security vulnerability
Huawei Mate9 is a smartphone from Chinese company Huawei huawei.PhoneFinder Phone Finder is one of the security mechanisms which is mainly used to ensure that the phone is not bricked or restored to factory settings after it is lost and stolen. A security bypass vulnerability exists in the Phone...
iSCSI disks are lost on upgrade for StorSimple appliances after update 3172614 is installed on Windows Server 2012 R2
iSCSI disks are lost on upgrade for StorSimple appliances after update 3172614 is installed on Windows Server 2012 R2 Symptoms When you update targeted StorSimple appliances that have the July 2016 update rollup for Windows 8.1 and Windows Server 2012 R2 installed on Windows Server 2012 R2, iSCSI...
CVE-2016-9885
An issue was discovered in Pivotal GemFire for PCF 1.6.x versions prior to 1.6.5 and 1.7.x versions prior to 1.7.1. The gfsh Geode Shell endpoint, used by operators and application developers to connect to their cluster, is unauthenticated and publicly accessible. Because HTTPS communications are...
Apple iOS new vulnerability: hackers can bypass the“activation lock”-vulnerability warning-the black bar safety net
Foreign media reports that security researchers recently discovered one can be used to bypass Apple iOS“activation lock,”the Activation Lock function of the vulnerability, and even evaluate the latest iOS10. 1. 1 system is also not spared. ! Apple iOS new vulnerability: hackers can bypass...
b2evolution Arbitrary User Password Reset Vulnerability
b2evolution is a PHP and MySQL based blogging software developed by software developer Francois Planque. A security vulnerability exists in the 'lost password' feature in b2evolution versions prior to 6.7.9. The vulnerability can be exploited by a remote attacker to reset the password of any user...
CVE-2016-9479
The "lost password" functionality in b2evolution before 6.7.9 allows remote attackers to reset arbitrary user passwords via a crafted request...
CVE-2016-9479
The "lost password" functionality in b2evolution before 6.7.9 allows remote attackers to reset arbitrary user passwords via a crafted request...
metro.ua XSS vulnerability
Vulnerable URL: https://www.metro.ua/my-metro/lost-credentials/lost-credentials-password-success Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 223335 VIP website status:| No Check metro.ua SSL connection:| Grad...
RecuperaBit - A Tool For Forensic File System Reconstruction
A software which attempts to reconstruct file system structures and recover files. Currently it supports only NTFS. RecuperaBit attempts reconstruction of the directory structure regardless of: missing partition table unknown partition boundaries partially-overwritten metadata quick format You ca...
iTrack Easy Authentication Mechanism Bypass Vulnerability
The iTrack Easy is a versatile Bluetooth device. The iTrack Easy fails to implement an authentication mechanism, which can be exploited by a remote attacker to modify the GPS data of a lost device using the 'parametercmd:setothergps' function...
CVE-2014-9906
Use-after-free vulnerability in DBD::mysql before 4.029 allows attackers to cause a denial of service program crash or possibly execute arbitrary code via vectors related to a lost server connection...
UBUNTU-CVE-2014-9906
Use-after-free vulnerability in DBD::mysql before 4.029 allows attackers to cause a denial of service program crash or possibly execute arbitrary code via vectors related to a lost server connection...
Personalization Settings, Such as Outlook Signatures, Are Not Retained
Users report that certain registry settings and personalization, such as Outlook signature settings among others, are not retained after they log off and log in again...
Nextcloud: Lost Password CSRF
Hi, I think it is something about your Wordpress version.It's not something highy risky bu it is vulnerability. CODE: Username or Email For testing CSRF I added the .html file to attachments.And there is a screenshot for you. How To Fix : Adding rpkey will be fine. Please take a look at links bel...
Forgotten Places - Lost Circus - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Forgotten Places - Lost Circus published at the 'play' market has multiple vulnerabilities...
Slots Lost Treasure Slot Games - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Slots Lost Treasure Slot Games published at the 'play' market has multiple vulnerabilities...
Valhalla Lost - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Valhalla Lost published at the 'play' market has multiple vulnerabilities...
Lost Bubble - Bubble Shooter - Base64 encoded String, Customized SSL, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Lost Bubble - Bubble Shooter published at the 'play' market has multiple vulnerabilities...
Skylanders Lost Islands™ - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Skylanders Lost Islands™ published at the 'play' market has multiple vulnerabilities...